This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft File: sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft (raw, json) Hash identifier: /kPq5YxfCh1h15GKjYF8Z99ny1UoIDpD4CBJMBaiQyM= Subject key identifier: 75:81:E1:F0:5F:D1:05:0A:58:EC:00:97:00:0E:BC:8D:BB:4C:73:89 Authority key identifier: B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36 Certificate issuer: /CN=b118ae24c94cd40274b3807babfc8b9bccea8b36 Certificate serial: 019AF163E585340448D17F479073999CC5A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft Manifest number: 10CD Signing time: Sat 06 Dec 2025 02:00:47 +0000 Manifest this update: Sat 06 Dec 2025 02:00:47 +0000 Manifest next update: Sun 07 Dec 2025 02:00:47 +0000 Files and hashes: 1: 3VLZ851VUhXxIG7ryQ-8eGekA3s.roa (hash: WkKK7D8YH2zVVECR2pK95SMukGQlzInUKX5HdUYAXRs=) 2: sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl (hash: Xqnl+BWzQt9u4K9bF2onPimCTMZFPO2InLSgp9T2Qs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e5:85:34:04:48:d1:7f:47:90:73:99:9c:c5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b118ae24c94cd40274b3807babfc8b9bccea8b36 Validity Not Before: Dec 6 02:00:47 2025 GMT Not After : Dec 7 02:00:47 2025 GMT Subject: CN=7581e1f05fd1050a58ec0097000ebc8dbb4c7389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:7b:a1:d3:35:35:20:bc:72:a9:11:bf:0f: 82:a0:3a:9d:8a:a9:1a:93:ce:bf:d7:e3:42:7d:02: e4:0f:84:ae:1b:dd:7d:80:bd:97:cb:25:b2:34:31: f8:bf:d4:8a:62:1b:8c:2e:fe:6a:b4:04:48:6a:e9: 81:84:53:ce:d3:68:d6:ef:68:05:a0:d0:ea:04:ac: d3:a3:b4:f8:75:12:43:be:87:07:df:5f:3e:bc:a2: 88:75:2b:3e:4d:8b:c7:80:35:bd:3d:bc:f9:1f:ce: 14:db:ff:3a:93:b1:a2:a3:31:25:f7:22:e3:30:f3: b5:8a:80:ab:ef:06:e5:94:bd:52:a6:44:cb:cf:e1: f9:70:e9:fa:bf:aa:c8:fe:0d:cc:e7:4b:b8:1d:dd: 53:4a:af:e2:b8:86:0c:1a:7d:27:96:48:7c:ed:e6: 43:c6:1b:00:81:56:f0:af:d4:47:31:40:f9:85:f3: 78:e4:74:41:cb:25:18:47:f1:48:bf:a2:f0:28:68: 4f:16:61:dc:0f:72:e3:65:c5:d1:d5:ee:03:17:d9: 3d:c8:75:05:26:af:6e:64:87:dc:5d:1a:1c:27:cf: 39:e8:7d:15:ad:eb:9a:4d:0b:a6:17:17:9d:00:80: cb:92:fa:05:64:8e:de:c6:1b:e2:d1:48:23:3b:c5: 08:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:81:E1:F0:5F:D1:05:0A:58:EC:00:97:00:0E:BC:8D:BB:4C:73:89 X509v3 Authority Key Identifier: keyid:B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:df:76:49:c4:18:f8:31:5c:c0:bd:db:89:da:57:ae:48:fa: f0:a7:b4:61:fd:c0:2a:e1:49:8f:ad:cc:38:b2:85:67:1a:80: 8d:ac:78:48:7d:f7:31:37:96:82:28:7b:63:08:e1:a0:00:db: f5:79:18:70:16:a4:86:4d:28:55:db:75:50:04:76:26:a2:c4: 5d:1a:8c:1a:ca:4c:96:56:73:6f:a2:fb:47:73:ad:7e:93:82: 36:12:2d:04:db:76:87:b9:de:ef:eb:50:13:0c:3b:d7:0d:b5: 24:17:a5:8d:f0:cc:e9:fd:97:56:18:e5:e3:35:4b:69:8b:16: ba:44:2b:62:03:18:69:c2:58:6b:ca:b1:7c:c4:5a:4a:d6:bb: ac:bd:0b:a2:e5:49:2f:00:23:b5:15:e4:4c:08:eb:8c:ca:36: 7e:8e:66:cf:9f:bd:6c:fe:0f:3a:1c:db:65:6d:8a:d6:93:67: d7:92:1e:89:48:50:20:6f:9b:16:91:04:c7:d6:b2:aa:59:7c: 6e:f1:4d:25:b6:14:3c:cf:db:f9:ae:09:71:38:59:6b:5c:a4: e8:75:4e:a3:45:a4:2a:fc:ac:96:b7:92:7f:16:51:35:1a:a0: 67:34:a8:9b:e4:f9:be:e9:5c:9a:13:99:65:29:97:64:7b:52: 36:9e:62:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+WFNARI0X9HkHOZnMWnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMThhZTI0Yzk0Y2Q0MDI3NGIzODA3YmFiZmM4YjliY2Nl YThiMzYwHhcNMjUxMjA2MDIwMDQ3WhcNMjUxMjA3MDIwMDQ3WjAzMTEwLwYDVQQD Eyg3NTgxZTFmMDVmZDEwNTBhNThlYzAwOTcwMDBlYmM4ZGJiNGM3Mzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuht7odM1NSC8cqkRvw+CoDqdiqka k86/1+NCfQLkD4SuG919gL2XyyWyNDH4v9SKYhuMLv5qtARIaumBhFPO02jW72gF oNDqBKzTo7T4dRJDvocH318+vKKIdSs+TYvHgDW9Pbz5H84U2/86k7GiozEl9yLj MPO1ioCr7wbllL1SpkTLz+H5cOn6v6rI/g3M50u4Hd1TSq/iuIYMGn0nlkh87eZD xhsAgVbwr9RHMUD5hfN45HRByyUYR/FIv6LwKGhPFmHcD3LjZcXR1e4DF9k9yHUF Jq9uZIfcXRocJ8856H0VreuaTQumFxedAIDLkvoFZI7exhvi0UgjO8UIPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWB4fBf0QUKWOwAlwAOvI27THOJMB8GA1UdIwQY MBaAFLEYriTJTNQCdLOAe6v8i5vM6os2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1JpdUpNbE0xQUowczRCN3FfeUxtOHpxaXpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84MTE0NjMtMzlmZi00OGZhLWIzYzUt ZTgzNjg5NDMzZGMwLzEvc1JpdUpNbE0xQUowczRCN3FfeUxtOHpxaXpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS84MTE0NjMtMzlmZi00OGZhLWIzYzUtZTgzNjg5NDMzZGMw LzEvc1JpdUpNbE0xQUowczRCN3FfeUxtOHpxaXpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkN92ScQY +DFcwL3bidpXrkj68Ke0Yf3AKuFJj63MOLKFZxqAjax4SH33MTeWgih7YwjhoADb 9XkYcBakhk0oVdt1UAR2JqLEXRqMGspMllZzb6L7R3OtfpOCNhItBNt2h7ne7+tQ Eww71w21JBeljfDM6f2XVhjl4zVLaYsWukQrYgMYacJYa8qxfMRaSta7rL0LouVJ LwAjtRXkTAjrjMo2fo5mz5+9bP4POhzbZW2K1pNn15IeiUhQIG+bFpEEx9ayqll8 bvFNJbYUPM/b+a4JcThZa1yk6HVOo0WkKvyslreSfxZRNRqgZzSom+T5vulcmhOZ ZSmXZHtSNp5iGg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:17:56 2025 by rpki-client